Privacy Policy

1. Operator and scope

TheBlueNuke is the trade name of an individual operator based in Denver, Colorado, United States. The operator is responsible for the processing described here. This Policy covers the WorldIntel news dashboard and APIs at news.thebluenuke.com (the “Service”), and explains how to contact us through the TheBlueNuke contact form.

The main website has its own privacy notice for its other features. This Policy describes the current news service, not possible future accounts, subscriptions, AI alerts, or Discord features.

2. Information collected

Requests and logs. When you access the dashboard or APIs, hosting and web-server infrastructure processes your IP address, request time, requested path and query parameters, request method, response status, and technical connection information. Requests can include browser and device information in the user-agent, operating-system details if supplied by your browser, and a referring URL. Web-server access logs can retain those request details, response size, and processing duration. We do not independently determine your operating system or use fingerprinting.

Abuse prevention and diagnostics. The API keeps a bounded, in-memory table of client addresses and recent request times for rate limiting. It also records request status and duration and operational errors; infrastructure logs may contain client addresses and request paths. IP addresses are not stored as visitor profiles in the news database. Do not put personal or sensitive information in API query parameters.

Information you choose to send. If you use the main-site contact form, it stores your message, any email you provide, the message category, referring page field, and submission time. Your message may include personal information you voluntarily supply. Contact requests are not public posts. The form also uses temporary IP-based anti-abuse limits.

News records. We store publisher headlines, source links, timestamps, and related news metadata. Reporting may name people or contain information about them. These are source records, separate from information about visitors.

The news Service has no visitor accounts, public comments, upload facility, payment collection, email signup, or persistent visitor preference storage. Filter choices appear in the page URL and are submitted as request parameters; we do not separately store a visitor preference profile. We do not request precise location or collect Discord identifiers through this Service.

3. Why information is used

We use request information to deliver pages and API results, operate rate limits, maintain reliability, investigate abuse and security incidents, diagnose problems, and assess technical performance. We use contact information to investigate and respond to inquiries, handle privacy and copyright requests, and make relevant corrections. We maintain source records to provide news information and provenance.

We may preserve or disclose information when necessary to meet legal obligations or establish, exercise, or defend legal claims. We do not use visitor data for advertising profiles, marketing emails, or AI training. Before introducing a materially different use, we will give appropriate notice and establish any required legal basis or obtain consent where required.

4. Providers and other disclosures

Infrastructure. Hostinger supplies the server infrastructure that processes traffic and hosts the application and PostgreSQL databases. PostgreSQL is self-hosted software, not a separately identified managed database provider. The main-site contact form is delivered through Cloudflare’s proxy and tunnel and runs on the same operator-managed hosting. Cloudflare therefore processes request and security information when you use that form. News-source retrieval is server-to-server; we do not forward your visitor address to publishers as part of feed retrieval.

No visitor analytics, advertising network, email delivery service, AI inference provider, or Discord integration is active in the news Service. Visiting a publisher link sends a request directly from your browser to that publisher, which then applies its own practices.

Information may be disclosed to authorities where legally required, or where lawful and reasonably necessary to investigate misuse, protect people and the Service, or defend legal rights. If the Service is transferred in a legitimate business transaction, relevant records may transfer subject to applicable law and appropriate protections; this does not authorize unrelated uses.

We do not sell or rent personal information, share it for cross-context behavioral advertising, or use targeted advertising. Necessary processing by infrastructure providers is a disclosure of data, even though it is not advertising or a sale.

5. Retention

Retention depends on the record and purpose. We do not claim that all information is automatically deleted on a single schedule.

• Rate-limit state: request timestamps are assessed over a rolling 60-second window. Client-address entries remain in bounded process memory until displaced or the process restarts; the window is not an automatic deletion deadline for the address.
• Application and system journals: configured for a seven-day retention limit, with size limits that may remove records sooner. Separate web-server access files have size-based rotation, keeping up to five rotated files of approximately 10 MB each in addition to the active file. This rotation does not guarantee deletion of the active file after a particular number of days.
• Security records: diagnostic records in those logs follow the relevant log limits. Copies needed to investigate an incident or meet a legal obligation may be retained for that purpose.
• Contact and privacy requests: no automatic deletion schedule is currently enforced. We retain them to handle the request and any related follow-up, demonstrate how it was resolved, and address relevant legal obligations or disputes. You can request deletion; we consider ongoing necessity and legal exceptions.
• Backups: the main-site database backup job removes dated backup directories older than 14 days when it runs; this is a daily-job limit, not instantaneous deletion. Manually created news-database backups do not yet have an automatic expiry schedule. Deleted information may remain in protected backups until those copies are removed.
• News and ingestion records: publisher records and feed retrieval history do not currently have a fixed expiry. They support the news archive, attribution, troubleshooting, and corrections. They are not a database of individual visitors’ API activity.

There are no account, visitor analytics, or marketing subscriber records in the news Service. If information must be retained for a specific legal or security reason, we limit further use to that reason where required.

6. Cookies, storage, and browser signals

The news application does not set cookies, use local storage or session storage, embed third-party tracking scripts, or run visitor analytics. It uses first-party requests to load news and refresh the dashboard. No optional tracking consent banner is currently needed for these application features.

We do not track you across third-party sites over time or knowingly allow advertising trackers to do so on the news dashboard. We do not vary essential logging or security processing in response to Do Not Track. Global Privacy Control expresses an opt-out from sales and certain sharing; those practices are already absent, so no advertising opt-out action is necessary. This statement does not waive any applicable signal-handling obligation if practices change.

The separate main-site contact page is subject to that website’s notice and infrastructure practices. External publisher sites may use their own cookies and tracking.

7. Security

We use access restrictions, limited database permissions, local-only backend connections, request limits, and service isolation to reduce unauthorized access and misuse. Public delivery is intended to use HTTPS. No system or transmission is completely secure, and we cannot promise absolute protection. Contact us about suspected security problems without sending credentials or sensitive exploit information in the initial message.

8. Your choices and privacy requests

Use the TheBlueNuke contact form to request access to, correction of, or deletion of information about you. Start with “Privacy request — news.thebluenuke.com,” describe what you want, and provide the email used for earlier correspondence if relevant. You may ask for a copy of information we can reasonably associate with you even when no particular privacy statute applies.

Depending on the law applicable to you and the operator, you may also have rights to data portability, restriction or objection to processing, withdrawal of consent for processing based on consent, an opt-out from sales or targeted advertising, and an appeal of a denied request. We do not offer sales or targeted advertising. Withdrawal does not invalidate earlier lawful processing. Not all rights apply to every person or every record.

We may request proportionate verification before disclosing or deleting information, and may be unable to associate routine logs with you without additional information. Do not initially send identity documents. Authorized agents may contact us and provide appropriate proof of authority when needed. We respond within applicable legal deadlines; exceptions may protect legal obligations, security, or other people’s rights. If we deny a request, you can use the same form with “Privacy appeal” and explain why we should reconsider. Where applicable, you may complain to your state attorney general or other competent privacy regulator, or an applicable supervisory authority. We will not unlawfully discriminate against you for exercising your rights.

9. Children

This is a general-audience news and information service, not a product directed to children under 13. We do not knowingly solicit personal submissions from children under 13. A statement about age does not replace child-privacy obligations. If you believe we have received a child’s personal information, use the contact form so we can investigate, stop any impermissible processing, and delete information or take other steps required by law. Please do not include unnecessary information about a child in your initial report.

10. International visitors and processing

The Service is operated from Colorado, United States, using hosting infrastructure and providers whose processing may occur outside your state or country. Protections may differ between countries. We have not established a special international privacy certification or a basis to claim blanket GDPR compliance.

Worldwide news coverage does not itself mean that we target residents of every jurisdiction. We do not currently offer localized international subscriptions, behavior-based profiling, or international marketing through the news Service. If your local privacy law applies to our processing, we will handle applicable rights and obligations under that law. We do not make automated decisions about visitors that produce legal or similarly significant effects. News classification is not a decision about your eligibility or rights.

11. Policy changes

We will update the dates on this page when we revise it. For material changes we will post a prominent dashboard notice, in advance where practical or as required by law, and provide additional direct notice where legally required and we have an appropriate contact method. Continued browsing does not supply consent to a new purpose when consent is required. We will obtain any required consent before enabling that processing.

12. Contact

Submit privacy inquiries, access or deletion requests, copyright complaints, and legal questions through the TheBlueNuke contact form. Identify the request type and news.thebluenuke.com, and provide an email if you want a reply. The form is on the main website; it is not an email signup and does not publish your message. Please avoid sensitive information in your initial submission.